xorist | 4c3a79e665b140217270e151cfbed8144b843e88fa0944caaea64ac6d880baf8

Analysis

max time kernel
140s
max time network
102s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
18-10-2024 09:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
Size

39KB
MD5

56a19e5b14e69a5026c51d53198ad0bf
SHA1

5eb79a58f2ec1681a91299fe924e476ee7ce23b1
SHA256

4c3a79e665b140217270e151cfbed8144b843e88fa0944caaea64ac6d880baf8
SHA512

a14970cdc5359199c58e555b506ce6ef15c2edbb7ce9b12b40f3ba7059527ab9e66421a78aafcbd8ae2f58908d1d070bfc7ab552e97b67b7c642e425bda92b35
SSDEEP

384:jrFjn2LitKkpArp6lrzF6qYvjSEtVHEF8VuPMB:jIDkpypAY7/xnVD

Score

10^/10

xorist discovery ransomware spyware stealer upx

Malware Config

Signatures

Detected Xorist Ransomware 3 IoCs

resource	yara_rule
behavioral2/memory/784-0-0x0000000000400000-0x000000000040C000-memory.dmp	family_xorist
behavioral2/memory/784-3947-0x0000000000400000-0x000000000040C000-memory.dmp	family_xorist
behavioral2/memory/784-4378-0x0000000000400000-0x000000000040C000-memory.dmp	family_xorist

Xorist Ransomware
Xorist is a ransomware first seen in 2020.
ransomware xorist
Renames multiple (2189) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Drivers directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\drivers\gmreadme.txt	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Drops file in System32 directory 21 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\WindowsCodecsRaw.txt	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\de-DE\default.help.txt	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\fr-FR\default.help.txt	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\@AppHelpToast.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\Bthprops\@BthpropsNotificationLogo.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\MailContactsCalendarSync\LiveDomainList.txt	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\MSDRM\MsoIrmProtector.xls	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\SecurityAndMaintenance_Error.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\it-IT\default.help.txt	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\@EnrollmentToastIcon.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\MSDRM\MsoIrmProtector.ppt	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\SecurityAndMaintenance.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\en-US\default.help.txt	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\@AudioToastIcon.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\@VpnToastIcon.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\@WirelessDisplayToast.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\DefaultAccountTile.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\SecurityAndMaintenance_Alert.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\MSDRM\MsoIrmProtector.doc	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\es-ES\default.help.txt	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\ja-JP\default.help.txt	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/784-0-0x0000000000400000-0x000000000040C000-memory.dmp	upx
behavioral2/memory/784-3947-0x0000000000400000-0x000000000040C000-memory.dmp	upx
behavioral2/memory/784-4378-0x0000000000400000-0x000000000040C000-memory.dmp	upx

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1906.2182.0_x64__8wekyb3d8bbwe\Assets\complete.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-white\OneNotePageSmallTile.scale-150.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteNewNoteMedTile.scale-400.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.contrast-white_targetsize-24.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\Scientific.targetsize-16_contrast-white.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubAppList.targetsize-16_contrast-black.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\themes\dark\dd_arrow_small.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\themes\dark\nub.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxCalendarMediumTile.scale-125.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxMailAppList.targetsize-20_altform-unplated.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\images\default\linkedin_logo_large.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\MEDIA\LASER.WAV	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.SkypeApp_14.53.77.0_neutral_split.scale-125_kzf8qxf38zg5c\Assets\Images\SkypeWideTile.scale-125.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsAlarms_10.1906.2182.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\TimerMedTile.contrast-white_scale-125.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Images\Stickers\Sticker_CatEye.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\ExchangeWideTile.scale-100.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.XboxGameOverlay_1.46.11001.0_x64__8wekyb3d8bbwe\Assets\XboxNotificationLogo.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-black\WideLogo.scale-200_contrast-black.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\images\vlc-48.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxCalendarAppList.targetsize-16_altform-unplated.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\EmptySearch.scale-150.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubMedTile.scale-200_contrast-white.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win8-scrollbar\arrow-left-pressed.gif	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Images\Stickers\Thumbnails\Sticker_Icon_Kiss.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\1851_20x20x32.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxCalendarSmallTile.scale-100.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubAppList.targetsize-48_altform-unplated_contrast-black.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\legal\jdk\giflib.md	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Home\LTR\contrast-black\WideTile.scale-125.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_x64__8wekyb3d8bbwe\Assets\Background_Safety_Objects.jpg	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxMailSmallTile.scale-400.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_x64__8wekyb3d8bbwe\Assets\GetStartedMedTile.scale-100_contrast-white.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\AppList.targetsize-48_altform-lightunplated.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_3.6.73.0_x64__8wekyb3d8bbwe\Assets\Square44x44Logo.targetsize-16_altform-unplated.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\contrast-black\MixedRealityPortalSplashScreen.scale-125_contrast-black.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\contrast-black\WideTile.scale-200_contrast-black.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-96_altform-unplated_contrast-white.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppPackageWideTile.scale-200_contrast-white.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\ReactAssets\assets\RNApp\app\uwp\images\onboarding\chats_emptystate_v3.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Car\LTR\contrast-black\LargeTile.scale-200.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\MoviesAnywhereLogoWithTextDark.scale-100.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Tracker\review_shared.gif	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Collections\contrast-black\WideTile.scale-125_contrast-black.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNotePageWideTile.scale-100.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-48_contrast-white.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\themes\dark\sat_logo.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\7-Zip\Lang\yo.txt	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\201.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\themes\dark\nub.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\invalid32x32.gif	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ScreenSketch_10.1907.2471.0_x64__8wekyb3d8bbwe\Assets\ScreenSketchSquare44x44Logo.targetsize-16_contrast-white.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxAccountsStoreLogo.scale-100.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\profilePic.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\video.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\Glyph_0xecd0.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\README.txt	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.YourPhone_0.19051.7.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\AppTiles\SmallTile.scale-125.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.YourPhone_0.19051.7.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-black\AppIcon.targetsize-256_altform-unplated_contrast-black.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win8-scrollbar\arrow-right-pressed.gif	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jre-1.8\legal\jdk\xalan.md	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_x64__8wekyb3d8bbwe\Assets\Background_RoomSetupDisambig_RoomScale.jpg	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebMediaExtensions_1.0.20875.0_x64__8wekyb3d8bbwe\Assets\LargeTile.scale-200.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-fileexplorer.appxmain_31bf3856ad364e35_10.0.19041.153_none_47569e595c44e70c\SquareTile44x44.targetsize-96_altform-unplated_devicefamily-colorfulunplated.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-microsoftedge_31bf3856ad364e35_10.0.19041.264_none_ef195f564f00d259\MicrosoftEdgeSquare71x71.scale-400.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-shell-sounds_31bf3856ad364e35_10.0.19041.1_none_cd0389b654e71da2\chord.wav	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemResources\Windows.UI.AccountsControl\Images\Outlook.Theme-Light_Scale-300.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-c..riencehost.appxmain_31bf3856ad364e35_10.0.19041.1266_none_777e4c5802d14c18\default-frame-template.html	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Ratings\RatingStars33.contrast-black_scale-200.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\uk-UA\assets\ErrorPages\DisableAboutFlag.htm	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-fodhelper-ux_31bf3856ad364e35_10.0.19041.1_none_e8e077950faced1a\@optionalfeatures.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..nt-browser.appxmain_31bf3856ad364e35_10.0.19041.844_none_d9eb415c5b9dbe4e\SplashScreen.contrast-white_scale-400.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..osoftedge.resources_31bf3856ad364e35_10.0.19041.1_en-us_a323edc73bd86475\http_400.htm	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-management-oobe_31bf3856ad364e35_10.0.19041.207_none_504b6becabbef9fe\autopilotwhiteglovelanding-main.html	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\wow64_microsoft-windows-p..ll-preloc.resources_31bf3856ad364e35_10.0.19041.1_de-de_d9073434864dd997\default.help.txt	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-i..ntrolpanel.appxmain_31bf3856ad364e35_10.0.19041.1_none_d0af17ec366548f3\HDRSample.mkv	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-i..sbinaries.resources_31bf3856ad364e35_10.0.19041.1_es-es_12451df02dbd2879\403-3.htm	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-snippingtool-app_31bf3856ad364e35_10.0.19041.1_none_4fb50fb329007a5d\Snipping Tool.lnk	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemResources\Windows.UI.Shell\Images\RequestedDownloadsCloudIcon.contrast-black_scale-100.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Ratings\RatingStars33.contrast-white_scale-200.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-c..er.appxmain.ratings_31bf3856ad364e35_10.0.19041.1_none_ff46bbc9afee54c5\RatingStars46.contrast-black_scale-200.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..oolsclient.appxmain_31bf3856ad364e35_10.0.19041.423_none_9de80b9d881a1ebd\accessibility.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-microsoftedge_31bf3856ad364e35_10.0.19041.264_none_ef195f564f00d259\ReadingListImage360x270.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-userexperience-desktop_31bf3856ad364e35_10.0.19041.173_none_6486f23c2831aaf3\InputApp\InputApp\Assets\BadgeLogo.scale-125.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\ImmersiveControlPanel\images\TinyTile.contrast-white_scale-150.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\RetailDemo\retailDemoSetup.html	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\cache\Desktop\23.txt	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-n..quickstart.appxmain_31bf3856ad364e35_10.0.19041.423_none_72535ca9b59a9515\NarratorUWPSquare44x44Logo.scale-200.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\ImmersiveControlPanel\images\TinyTile.contrast-black_scale-150.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Assets\PasswordExpiry.contrast-black_scale-400.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..nt-browser.appxmain_31bf3856ad364e35_10.0.19041.844_none_d9eb415c5b9dbe4e\Square310x310Logo.contrast-black_scale-125.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-u..usnotificationuxexe_31bf3856ad364e35_10.0.19041.1266_none_e8d910c7c702b558\ScheduleTime_80.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.Windows.CallingShellApp_cw5n1h2txyewy\Assets\Square44x44Logo.targetsize-64_altform-lightunplated.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\microsoft.windows.narratorquickstart_8wekyb3d8bbwe\assets\NarratorUWPStoreLogo.scale-125.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..oolsclient.appxmain_31bf3856ad364e35_10.0.19041.1_none_75cd350cc8b5dbcf\i_f12_chartzoom_reset.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-speech-userexperience_31bf3856ad364e35_10.0.19041.1_none_d1fafd8eeb2a2637\Speech Disambiguation.wav	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\wow64_microsoft-windows-healthcenter_31bf3856ad364e35_10.0.19041.746_none_93ab1751f704826d\SecurityAndMaintenance_Error.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\de-DE\assets\ErrorPages\pdferrorrepurchasecontent.html	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-i..sbinaries.resources_31bf3856ad364e35_10.0.19041.1_es-es_12451df02dbd2879\403-13.htm	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-i..sbinaries.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_414a0942eadc3634\403-1.htm	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-microsoftedge_31bf3856ad364e35_10.0.19041.264_none_ef195f564f00d259\MicrosoftEdgeWide310x150.scale-125.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..in.assets.searchapp_31bf3856ad364e35_10.0.19041.1_none_501fda1ac26a3cf4\HCWhite_Search_TraySearchBox_Glyph_100.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..okerplugin.appxmain_31bf3856ad364e35_10.0.19041.1202_none_d081f9868ac0a804\PasswordExpiry.contrast-black_scale-100.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe\23\common\images\togglePrettyPrint.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe\23\VisualProfiler\images\i_f12_context_chartzoom_reset.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-p..riencehost.appxmain_31bf3856ad364e35_10.0.19041.1_none_97b0a47239f6db64\PeopleLogo.scale-400.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-c..erymanager.appxmain_31bf3856ad364e35_10.0.19041.1_none_61ab84439fac4697\BadgeLogo.scale-100.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..osoftedge.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_d1f435fdf91e63d5\http_410.htm	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-onecoreua..uetooth-userservice_31bf3856ad364e35_10.0.19041.746_none_e6778e5b0114e5b0\BluetoothPairingSystemToastIcon.contrast-high.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..nt-browser.appxmain_31bf3856ad364e35_10.0.19041.844_none_d9eb415c5b9dbe4e\Square71x71Logo.contrast-white_scale-200.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-ui-shell-component_31bf3856ad364e35_10.0.19041.746_none_2b9acc2d69574796\Icon_MMXresume.contrast-white_scale-125.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe\23\frontend\host\api\data\closeErrorBox.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\Assets\PeopleLogo.targetsize-80_altform-unplated_contrast-white.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-c..in.preinstalledapps_31bf3856ad364e35_10.0.19041.1_none_78045c4b5f61a56c\DefaultSquareTileLogo1.scale-80.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-c..ngshellapp.appxmain_31bf3856ad364e35_10.0.19041.84_none_24f8aafdaceaf0b5\square150x150logo.scale-100_contrast-black.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-microsoftedge_31bf3856ad364e35_10.0.19041.264_none_ef195f564f00d259\MicrosoftEdgeSquare44x44.targetsize-40.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_netfx-aspnet_webadmin_images_b03f5f7f11d50a3a_10.0.19041.1_none_27faaee495997877\help.jpg	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.Windows.CallingShellApp_cw5n1h2txyewy\Assets\Splashscreen.scale-400_contrast-black.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-i..ntrolpanel.appxmain_31bf3856ad364e35_10.0.19041.1202_none_8f7e37524c3e1a13\TinyTile.scale-125.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe\23\debugger\Breakpoints\images\addEventTracepoint.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\Media\Alarm04.wav	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-onecoreua..uetooth-userservice_31bf3856ad364e35_10.0.19041.153_none_e669b22d011fc6b2\MediaSystemToastIcon.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\it-IT\assets\ErrorPages\pdferrorrenewrentallicense.html	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\Assets\Icons\AppListIcon.scale-150.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\Assets\Icons\AppListIcon.targetsize-96.png	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.EnCiPhErEd	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.EnCiPhErEd\ = "CNQMBAAHYSYIOWJ"	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CNQMBAAHYSYIOWJ	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CNQMBAAHYSYIOWJ\ = "CRYPTED!"	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CNQMBAAHYSYIOWJ\shell\open\command	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CNQMBAAHYSYIOWJ\shell	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CNQMBAAHYSYIOWJ\DefaultIcon	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CNQMBAAHYSYIOWJ\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\hXOylrsLTUL3Q5F.exe,0"	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CNQMBAAHYSYIOWJ\shell\open	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CNQMBAAHYSYIOWJ\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\hXOylrsLTUL3Q5F.exe"	56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\56a19e5b14e69a5026c51d53198ad0bf_JaffaCakes118.exe"
1⤵
- Drops file in Drivers directory
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:784

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png

Filesize
50KB

MD5
213068cb313a1b5c2b5858362c68b115

SHA1
4a3cddea52096ea3d69a5aa7e34213e692089836

SHA256
3222623c562707270835ea94e344114f49a818b900caa830a1d7e0bbb2217af9

SHA512
9022d2c5c56ea5bc54adf7e88f73b4471fdd7da9e97bb7801d7c06476e54ef162133244fc5427a88f9813ff553f4db8593ca54b62e4e3ae53c99981239f41b97

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions.png

Filesize
1KB

MD5
bce7751012db30c77d5aad443e5a917c

SHA1
90b9eb415cfe3a9203bac52aa6d5b901fdc775f7

SHA256
dab950440e34790627b9016299aa91dc38085d5a3a363d9abe7bb77628ea4437

SHA512
d5445b7960aaeb5afe5168fa165feef349e607ec9a7a3155b75c6a546052279d3954132cdd6c5f883652c04045c4490ae7d7bc9b5035d39cb09e9fa729acae3b

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions2x.png

Filesize
3KB

MD5
4223a572c211f2cf7054c6a4f1491ade

SHA1
3705d6b67f1bbc4cd5db8c10ff9c80a9db51c958

SHA256
f04efa49118d0aeb06b48f95e35259f338f63ac441fa781d395187b99cbf6a3c

SHA512
0975e70a96c259d3cda829c6c107738f71064d1319c403820ca62247b2e95a934d8bd91a7fa4b4ca140ffbde08fd6dc5df4e078b0735874f5302ae0f51e5d614

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png

Filesize
683B

MD5
a90fa9fc657d84b6aec929a8b46cdc8a

SHA1
7fbc4966abf99174eea582144476d3fd445cadc3

SHA256
bd11ec57e477f2bd99378c70ff6c42f8814772cbcaff0996ec49a99ff38f4f6f

SHA512
7b46be9351d9b4b5c6a2363d96b8f52985dc62534dce6c2a7a14249c885da2f74ca39fd5ec3bb4ce186e90b7413c72da60a22575fb95829217444ce3f5faac50

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png

Filesize
1KB

MD5
16a3b9a55fe9a09004d7ad7b93d10321

SHA1
d11ec8bb296800aca9770d95542e9856c36d3c0f

SHA256
b034df5ec465fdfd892192e1e2de0e4ed27e6734f02d6c0122517a0940897359

SHA512
fe1b305fe59888110cc3fe4c5cd07ee848056a0f676bdb77cee6fe44e41b975ae54424ea80dc93561c7c456b0dbe6ef7f76f4fa76d370e5061f80f9480a8e2f4

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png

Filesize
445B

MD5
01113971cac369c9511451153a97d6ff

SHA1
c3b9a3dd1d609df23cdbe9e99f555845191093e9

SHA256
ad09a4c71d8212c2d3b629de6f473ce8ffcf839f13e0d7826697bfd5f7bed1a0

SHA512
9265e36f2c650e550ddcdf1ec7dc1f2c21b6aa57fd8c814832e3e21ac808e8a7e98b3d7d9a5a11b0ea805fadf0cd770a4dce0b36814ef6201610fa4134f6a9f4

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png

Filesize
611B

MD5
57d3fdf301e8e987261d4b3d5233f2cc

SHA1
c6dfe8437cd4914dea306f3c6bac9627cce1a39f

SHA256
9e38fe3feab10168ebd6693b5f718285651fbdc043ae0bff22137440ac04b8da

SHA512
80ae6cc275435f483ec2477c67cddbbf7e19d65c8059c0f760912214b472389720a7c3b0d990b1672eed773fe3f2a40945008b22915dcd95f3a2a5cb88ccdf01

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png

Filesize
388B

MD5
d3c2dd6c4f70e0089e3b04e30c985655

SHA1
5d3479ebfd11239d07730f3e7a621421cf20942d

SHA256
b20078572a70ac435fa40e3aceef29fc48d83a6b5b7eea9e093892f6f354165c

SHA512
6864bc94b355b5077699af37ed80902021996557a8cf8740730b2ecd21d82b63b7b8e74a6c4b8b79afd425af16f9db3e3d8f8688ac45d34fb14ea7d90a84d85b

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png

Filesize
552B

MD5
1c340cd3a74619e1eddadc8f29d89375

SHA1
2dd00719e616fb1f765f21d5ad197dcf0b1ba333

SHA256
13cd4d365e41fbdeafc11a32451736d08a9d211a9de8bb665ef3b91b9e086d80

SHA512
e1e43ef4d9ac843dd0b231b037d60d5068723dbb86bae8364afff45def7ac5dca545bba3fb30afc0db204e2a9b4af49c2cf694c7bdcbd55fa88891d83d578a43

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png

Filesize
388B

MD5
9aea39a19634a352826c10f28390c831

SHA1
1c6b551e9bce3a6aef9ee61147685251a5f6fe15

SHA256
7dad63e227bf85ebd3341c482e25a41c33181dbf860d25578db3575a7ea7d5a8

SHA512
68cfa830ee87da796294dcb599102ae51c30b54393b72938ff5eb8bae3ba77109363ca0b5765131680a1f5c267f6f28cfc0a8c7f41e02fa19f7b5a510d405f84

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png

Filesize
552B

MD5
561aa66e5e2acf89e16d8f3397bfa64c

SHA1
084b385aaa988fbe478903a4ebae8919943c8e8b

SHA256
ef3603ff96939f9f7150638c64e74f0fa03db2afb924a26d7b0ef42b66a8a529

SHA512
3433a881ab4b1ab8b7b4400b63b0da22f824c80bb0b9c25a98011c9f92a58ced2f40aedfec790422756db6c249a53ed2d19ba7994c5984a6b6a5ac7e428b53f8

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png

Filesize
388B

MD5
dc9b26a99fcd9e561b5fc614c49557d9

SHA1
11cd8b371cc3e21e63ac074b2b61871851158fec

SHA256
f37b19199f1ee59bc5ef1a5f9a679be11f05388533b9241f052b892b94db5027

SHA512
74e3bc562f12ec89b3ae97de6162682d9fce6101d1bf6169c8feb030c9029abbff2eeec28359b58fa6436f16b45737cbce91d4bac7114f4d1a75e718f86e15f6

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png

Filesize
552B

MD5
a646fb77829e08de025962885a87fc5f

SHA1
6c51f033dc7fd31c62c4189aadbb7ee9e0db0304

SHA256
9acd2bcce0e432c91d7cc0404c8f89c4c88a55a17c22f873063a9bc6fbfb8bfe

SHA512
42341c849a14fb655e6586034efe85cf4d146591b70bfb09952f5d27d1e24c85af585bf334bb9993f208660e0f144c431fbcd412feee9198a8290a04ef5b077c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png

Filesize
7KB

MD5
ca3c93b95e50e1557b0302a959529968

SHA1
b4d6e9fbd31b2e8d0612218c3228571fef7d19cd

SHA256
cfe5f3078bd41902ad7352168cbe3882e771aceed4c5e9a72c54d65828e04ee2

SHA512
ec6f768c86124c33eb6b7a1897fa71eeb951e9cc455730bf69858db8ecdeb7d7005ff50fc19c5e4756dc811b8b6d795a658d82694724b84946ac9cfcd729e45f

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif

Filesize
7KB

MD5
a0d5a0e9aac5b3b979a0e7d678553e01

SHA1
494544b8420e95d0172ccc31ddcefe22b7f791ae

SHA256
054c8195607c2054791ef525d33b8ab3c13d6a7ee2a01d71983983b256470fdf

SHA512
5cbcdc293f258f1fd3194926b7d3d70dbe3bc9b6c6265c44aa84b77c2000157b77bdbafe4de9ff8a0877ee399ef30b167c1c539821ef2e37f661f7b00d9a0ed7

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png

Filesize
15KB

MD5
bdb7fea40b1b98690c7280dc6e8f6770

SHA1
79578997821b1918da278b8afd620b4ba2a2d232

SHA256
e53f813cbe6e634d322038bbbc5a6e1497ec5f7641bae517bea017a783b99409

SHA512
5fea24418057531b3f287c2574dec0cc58509777f9b209c1fc0c938781015dd25a63d98c6b625cd369af3759cf0a5fe966f05fe3c5a6d77195f5de407bdea15f

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png

Filesize
8KB

MD5
e78b33689d5c4c2c9a88c55a1d800348

SHA1
64d5cf03799696edf4cec9b2011db50d73a9e4f7

SHA256
667214258b525cd3c27417436a2e97e03abf4a51382bd5fdf6d038796f2997c9

SHA512
0ece9f1d9f11611eaeb0d004d30d38396a09c1e56c82fa3002145e8ef43bf6db61f6e36e55126289e0aaa3c2a492f64c3a7286711e30c3aff5272943e81072aa

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png

Filesize
17KB

MD5
c8b479eeb0a9093db835cfa6bd3ec289

SHA1
c8e7a62fb58369561681185170db98c43b2ad08c

SHA256
64f5dabdaeb26793bde1c453683b560925d7ccb2e21323c4f267cc6738056052

SHA512
778789777a19738b89f8fd598b3d0a03acfe260e8c6c304123c262169af99e1c78a9656634bb1d30207c5ed4ac77972c26d0dc310e4857b09bbfe78cfc5875e0

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png

Filesize
179B

MD5
eba4c354bf947c5d3ef72c70add41e40

SHA1
a06c2ac61193dde59037139c0a9a9dd5d947a05a

SHA256
682ddbb10a1e970f1e8d9beb1d45b675f7569d652dfe68c04c44322ba2f556e7

SHA512
9e616602728ee95bb3f60af81e7d3c25d6afe4e51c0c8d2b8d9df359d41c0e297c24d5f5a30f0abaa22ee7689c90192918df92fd637d7ed79c7b94c195272e02

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png

Filesize
703B

MD5
124ff23013af7f854f8201a7bcc5cf0b

SHA1
81b2bfcba1d5e5bf5c1955607f0bc71011da477b

SHA256
3826f8fa0e27e5f5ff038fe481938abf0e4811b62ba4b469173889251d8bfe01

SHA512
0b7ef2b0567c93f62f6e32690a083d965faaaa894a1a320b4a49d595856a861ee1b707a255bd0ae3608b1c73456d0e1bcb4a10edf7b513f91a7b2496cd6eea79

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png

Filesize
8KB

MD5
8bbe2b02461cbd4370e7520acc07c491

SHA1
c41d7541cee559b1900baee9cb6a0d53f604bcd2

SHA256
cabd3d5a01a9df976b15e34807c30939bfeef81df29de5d813e148fa1d6d4cd3

SHA512
6eb40fa4c158f56ab69cdc6d799fb30f28bb19464eac769dcc0ddc7bc26619d61c51886d2ad75634c0e03e1ffee4f1db16d61a7f6bdb55ff6c419604722d0018

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png

Filesize
19KB

MD5
51887fb6e74a3477ecd485cecaa93ecc

SHA1
7cfc3b9ef61d2bb172b2ad05a048b04d680a6f94

SHA256
1374663a706106e5fc25d48b336e124fc54fc32f6a92004019cd6f895af62552

SHA512
09b8617a908772472f9c93bd0a98292157a18b161235d8551c409e0fe41a93f6c45a48700edf2e2417d99f6d4614f391a842c58af513ecf31e3b87632ac91f1a

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\faf_icons.png

Filesize
6KB

MD5
ca004ef207746c7f6a89fac19815a1f8

SHA1
60c9a6eedbeeebee6aefe5a2a30f3e84a0c03121

SHA256
022d625bfed7d28a8ba682ef007805ad0dfe54d114c94814e3f2786b701cbf17

SHA512
a6f28866f7de4c4cad3218c46803d1b6fd11b6138f8d484113e5a6eb2f01c213d100954035d9c5b2cb20c9f0e57e7e6558d4795b525a8d16e91fb41bd0395d7f

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\bun.png

Filesize
2KB

MD5
778d745212a2534331da899e743edbba

SHA1
7f90833908b6d8e109c22f56ae893e70130fad9d

SHA256
a5dda355f23c156c69cac305df90426c9e1206dee2191fcdb1a1f7253c7cba1e

SHA512
42485787cf3cb0ea98dfe88fa60ea099eaab996ed2d5969e369fa22fb566b0a3d10055f1c3b91c9f8e834c51cd637ffc018a108c353e7a626b69fd011856a27c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview.png

Filesize
2KB

MD5
550c661527abf1c410e9a7ecaad76b01

SHA1
f95444a89f27e73f74c525012668d1fd10dc8ead

SHA256
02b1d4fab8f66b475833134feb3d49642571f45b3154b38e30094442d100b661

SHA512
49cfa3aeed024153e540a424f3c6c92b53954a7af8833f085b2e31f568bfb46071520ba3269c13f1ea8ace70f545085e43ba56a0bdd36800b068e016035f10fe

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png

Filesize
4KB

MD5
bf6a81d83b9b03c5248b8f4b873969a2

SHA1
e3c3c3016417f46a93d8c72ed87f84f326e54363

SHA256
e26411b8701238526671cbfef4a722ef9b6b77391132a4f990525e963bb822c0

SHA512
2141f241ad61059aa7e8e3d464e1080965501cfc9a0062aa92dcfbca674b6ca718a136f6d20caa6808785be2bf60103f3da773d03228dee9dca4c2cbab4b26da

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small.png

Filesize
289B

MD5
3fcdbd2fadd493a0242fd248b7fb8a40

SHA1
9b2362edcf730947bf07263bb6c767b97a072de0

SHA256
1e8879e109083f9dd286fed52961172a8c43471e8d1754cfb2c19d851d263bb1

SHA512
7ba1c1c40c3cf6d54127c4b7dc645b6ae7f5df0f3e097ace7c4ebefcdd0395f6bd8c78f8e23ae8e3d42a242417ac29da183dea38cf2486a443ef4334e09de1f6

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small2x.png

Filesize
385B

MD5
b9f5ca53b66326f2e77e567c95487e7e

SHA1
2811471a0817de02f14213405ce02669559b77f0

SHA256
67c56edc2986e94b9f9efac369bcc8e5ff096bc9173d9854e478de729c032c41

SHA512
5e04e9db8d2f4058096fa1b633a3f2caeddf4e95ccc67c512b027256902c07d66a5d982b2891a9de9b55454524571af888bb7d0b381299e986c490ebee3be8ee

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png

Filesize
4KB

MD5
c3adc8f3850ad8473624fac6b108718c

SHA1
4fdfda8629e53071838f2d9b645dddd9cacfec09

SHA256
49ef5bed42f8373384e8e516fe7e88650e2b40586be8261e14a7ba61f987e0ac

SHA512
c485b09426e89c55e98f4ffadc228326a83c6de2eaabba12dd83c6939387c2742e71e12fbd5f57360c63ccffc7ccf4ef7f9102a0936a6d2d3aafddf59a34ffc2

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\nub.png

Filesize
1003B

MD5
0586ef6c047087ed744e65463874f85f

SHA1
b37b9e910a05cc795a1f7e9eb3bf805d78cbdbb8

SHA256
df108fe10b68d55b26b654976af0586862abd344c616c1f22b089ef486a0897f

SHA512
533b8f478b9515a30ebcbe7bc1da3df81e0c47869d0727cb68e5564789ec0e6162f919bedb95f3e2bf2ccfba90c81c32763defd0c66ae6b83f5a52846f2130ca

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png

Filesize
1KB

MD5
068296e241c6df0b4612998c83d56afc

SHA1
a415c7b28bf2d01fbe0dcd302f6dd0e8211ac978

SHA256
ce4813c4ccef846c64cc5f9a035aab57da572619389554390e9e88c2cf1b62c5

SHA512
7a0f34656d9f3948e6727e0bbb02fc42e13d2daeb09acab7a7b827945619ad7ac4617359690fed94628b2e2ff2a0d52f3ff8a669ab222b81916f4fee8d99a260

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons2x.png

Filesize
2KB

MD5
8fbd771522e17cd9d3dfb1d60047fbb6

SHA1
b38ba232f4bc94e632f02e9206d6a0c55348d29f

SHA256
04528886a2d6b0df133c3db6420dea089d05ffa17a7f4696531e831f28e00666

SHA512
922963b6efc9ad5654953a5c0b0172545bcf0caccece144627c13f50f4e48891ea7cdff9f7fccb37f144ea4cac81180d65aac159871c9fa9c09d7109d470ba1e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png

Filesize
3KB

MD5
be2c2e84cf578d125d4fa83a1ef7cdb5

SHA1
1e51f4dc9871466e27056c1dcbe097c093ca5ecf

SHA256
0fc078bf50d94f985450cd6ffb6f5e10f400e2d11cab84d613ecf4782a4b88e5

SHA512
143f8cc2a8959f1b4e5a2f2f68749fb1bcc4c57463d8baa72f4fcf4f81ac63dc3d8acb615ea654908aa1df2ac05fb8eef20f95851a64a7c082211ad557d5d2b6

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif

Filesize
556B

MD5
ecab6d61ecc0b2c1abfe9308bf0de189

SHA1
b65e3f12996ca5c08d016858051145a148ac3dd7

SHA256
6cba13d1cb88062a47842ccbdfb5f06542ec43586291fd28a979f36cd243e13f

SHA512
3320bb76f2b1d0358ef620c065bf5adf5609f99af7fe8a0ed0398c32456f57ca65fd3b8e4370cdf0d847f1c278509ae4b26b5f3e73823ac4fadca1cae562c01e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\logo_retina.png

Filesize
6KB

MD5
6675dcf725ad2c48d252641452fae600

SHA1
6bee99756aa8273a844c6f866cb4e106df7befe2

SHA256
382eb53c036e460add2a773ae3521f3b2d694992445499088ec7bd18c9ae79ff

SHA512
47f16e7e4b9eda63330ecc3d844795b858e2f96a13124486129066caffff37cbe4e447cdf69e0d5fd41dbca3421e18a133f8920852ac7121b15b479102eba809

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png

Filesize
826B

MD5
c685392932011a922d5f161d66a8065d

SHA1
6fbd1c825b98a583a6316435e6846d3cd1b01c04

SHA256
04f4716b6bdf90340bbe7ca0c7588a93c198d00cabb902cf3ba757b856579500

SHA512
cf116409d14367f2e00b7fcd31c0f9b4083477146e110f695f417bd2cd6fc95f44d662fe6d88c01c71c315384c75dbaca1f40c86174ad2d7373f878b8f667084

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png

Filesize
1KB

MD5
8f992cf8229cf2402e949a2b461c208d

SHA1
4ebe032f11dc9b1867ed28e2887e3470e9c8512d

SHA256
8e13e9542886d054fde48d4bc95a6378855817e3c054ef5b2acab43270ebeca7

SHA512
719392ff15288fe90856758be8b1ac2d660bc00622ca42dfe536ed98f0a6b7848b2a994665eb02b9a145a1b44aed78d27c88bf80d0cb150bd1ee31eb78a210bf

Download Submit
C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt

Filesize
32KB

MD5
f3e8c2f1ef80eaf87d015869aafee6a9

SHA1
6e431c1d5c5cc1a4f1f9dde99314e10d11e320f8

SHA256
0177005fa9ab64958b92e626192a3e599beaff5a12f53ae1336ffecd60794ac2

SHA512
d0759d445beac0dc0bcfcc2291a55ff28f8a73ab046cd1cb9f1fe463fb014ce9fdb29706819b79051b76691d355bcc969f6d5a9f41b4df2a89508b99b1fe7a32

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif

Filesize
153B

MD5
8eb9679fe485e4138cf824205b85ebc1

SHA1
252553020e0cbe310b4f4cc31cb48257ad0014c7

SHA256
099c42b3bff1eda068edb5f9d90a4f28fe8a9ceaf0f8347bbaa125db0adbd056

SHA512
9257f090a3b631d2af07794242b363adf412701b61246cce4c793bc73adfb2fc40612176f566908f91a68d851f2bb542c906ca89ab1287bde0dac16d143f4b52

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt

Filesize
190B

MD5
ade966660c78a1b099ccb519731df8d8

SHA1
1e1920d0649cd745ecdddbd8123399e536373899

SHA256
a761a2547bbbbf4abde083b6269de43ffdda2b543cc58538700045c2a7b75f3a

SHA512
e2f0ec092457be9cb9096bed73e7e479617db7d47b66835e0a1aaee227ca3e44dfd3c88987a9b9b2abe3f6f755ababf71b17771da9600668e09d6da9442e8c53

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt

Filesize
190B

MD5
9abb37b06f10995fa9f655c4c2225b34

SHA1
b1b07d027ddccd1a1780cd246a59604fe4aaa4dc

SHA256
fce0f945100059d65410c8dd5f6de9aa8b4e85c7ca17635e75e0827c3b3f6349

SHA512
29c04bbb834daa74611513db5d9222c27add66135b5b1701d7ce3897ffd29cecd9d1c456adadcad396750412d433071cf8ef0255d2ed884ece39a89cc3075eaf

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\directshow.md

Filesize
1KB

MD5
c4464b6ba95269860f7749b69b46ff69

SHA1
ec397ce401b3acffca5c0eed01d04c320c12f4e6

SHA256
0e488cf03526bb26e8e323497dd2a12bee85747ad8ee8586dee37b78838bdc55

SHA512
7a49fe5d027803e605bf8544acce4d9e53a15f2bc4782cd3c534549e0ee5722c2247dec776c928f5f87c42cb2425864e95fae96dbce71cb5d619f3d64a3df306

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\glib.md

Filesize
31KB

MD5
cef1b4761096a0db4d4bfff8d776a716

SHA1
455ab3caffd66a9eeeedd7fde99e54ffc9abf504

SHA256
15707ea05ed45c2b1e0f85bc25f74fd7a1c7f5817d756546c3629d0ca9741804

SHA512
7df3c7e2f926099ed9f6d80ec6308b876e3a03dffeedef785a6a10f15e30fc4bc8e089a2d871c4cdaf091b666e9db8c2794515e496778b47670d06c30feb6400

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\gstreamer.md

Filesize
34KB

MD5
fd41560ff6fa98737c7de2219fbdaa52

SHA1
acfe18628288428952979e87929236ab351a8355

SHA256
f7a0b1ca50de06b10552ef650c6beab67d5620f59ecfdb4cbf0e5f4d04e8259e

SHA512
41fe93c56dab6ca1cf8febf93790f0779b34009f84cc970de4b65bfebee1fe0c7fd70a1cd628b3fa6c45cde9363fed104a1c4d975d0cfa317dce0d886fb9a916

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\icu_web.md

Filesize
23KB

MD5
b5aa8e4b01f37fd44fa070a6afbca999

SHA1
5b76dd7e14cde8630d8b54bf0bdb0c01c9aa2c5e

SHA256
16286b576d21808dd36bb8866a7745143fac90502b65dbfbf68947a4a51a2db4

SHA512
091508c31d16f7adc4ae2d25e20af25a12ef87fd07c62ee3ae073f0cf2948645703545cfb2075f1baca41715c24d31283590f8a358644c75a19774818b1a715f

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\jpeg_fx.md

Filesize
2KB

MD5
f8ffe45f3e7e3d4de6109c066d7e4a08

SHA1
e9b8e431235a176fcd1b38903880e7d6a423415d

SHA256
be01b62ca14a5ad68c363c23cccfc7b31f85ed61ad73f6a49281bbc26f17beb5

SHA512
caaad41a54782bdca7dec9ba2f940fe5864889761a5759636ee0aac8c8ab469b5cac3836f9bfa58e5f67785a009ed6c2caaa681006fa506e5a374b916eb00a6e

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libffi.md

Filesize
1KB

MD5
6c4945e4e09f0e1798f9b798965a1a0d

SHA1
c1346e8ca0e473e4130ec1ecd7d5ca64ad3708fa

SHA256
d03259028af9b1043be08c5f5f6fe6b52ac0a3d73b2303b6f9d93be770cad6ee

SHA512
16ce2de371f2c68ceda77e6903cb9c99d1d6040bde0e671ac5cf432d72dd9b64c13a50d28234bd855cdc87e2cda2a0d127c3f093da9476a4c220dc8316d06017

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxml2.md

Filesize
3KB

MD5
cf14998894c0a7a13b8407a8d2101d26

SHA1
aabc2766453f5e1aba0c1e307045d201b1665d4f

SHA256
b22c7f25d96beb7d98b07efcc49d219fa50925797132b77bdc5a41116a0be899

SHA512
063e902a2537bd02e61ccbe2ead34b52b539b708e0efed028f43bcbd1550c9171011ec3391285b107d74b1f237ad72bea35127983705fcd394c2341cd7751c59

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxslt.md

Filesize
2KB

MD5
e8b6361451ce0c05aaff76c1effe65d2

SHA1
a7e5933e8dfac2a7cb96d0e6475bc0df4742eb63

SHA256
bcf3ce20b6339e2247d41de00753640c60a5ecd0829737dad591efacc21ab535

SHA512
6c290314dbc1d33f227e6d1768ea5cc02b029aee89fbda5c415620ec4b59b0a94bebae7c2df470508f17f32a9ee6f7ef9f9477c1c36873e10ec2e1b845d459bc

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\mesa3d.md

Filesize
5KB

MD5
c35d5b7f96b406a7ecc22b09525147a4

SHA1
3ca6d379a5ed5974eac6a1a191acbe77bd38acff

SHA256
4d8982de3a517d17fd3d76404623d1907b779d78117bec80764b2cdce6944b1c

SHA512
5bc7ce2d1916168c99bfe1327edf7093e1b9626655a67b394c0bb110451555fc2cb893335b71826c40329397eef2f1caefe8aec0e049876e57763a725f749efb

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\public_suffix.md

Filesize
17KB

MD5
52431905ed1f0020468b906666782902

SHA1
cc9b841bb6b9c201ea535bb68d2656e467fc97be

SHA256
742ccc2d31f5289350bdbb9bf303538cd1d0bfbe4a6bc2674c191449461acf54

SHA512
dfd4149417dbed2ed76691ac3726a0a17ff2cb135cd8b26e4fc8de624327e9b31119b4a17b6496ed9596f444f4e442e492c322afd1e0ec7a785e3b15abfe0e87

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\webkit.md

Filesize
320KB

MD5
7267697260458604685fda975d1987d3

SHA1
7d06a4f1df1ad5822a0b5e09d53cd4e4f2810e53

SHA256
24f5075c0b8b000d2a72a674818f08d141036ba9f37cb712f1c62fa51fc19c8b

SHA512
c6566e80c613c82ad68e60c4333345244a19819f6f9b0a6023ff3fc43945286f5ee45c7b8282ce6b57687464cfcc2dd2b2ae8a6a58513e5fc45ac31f878c789d

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\asm.md

Filesize
1KB

MD5
7d54d4a28ef9fe8467a6de532cfee767

SHA1
0ce22dd839a1bc3fa77aa4a902cf8accb9526f11

SHA256
52df9354a4544d82a25641f210a1299c8d447ff3172de32050c1efdd166a0ff8

SHA512
e160ce2de73091fa3ea03c881f26b2ff96dea2fa0f210494d6041439194fc3b884b135af2e9a72767ffe466580a97dca9d430e62a2cf7d427ebb19466f1cbd30

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\bcel.md

Filesize
10KB

MD5
a4e70fffdc2ce0f3a787ccd478db1f74

SHA1
a894073f211287aa2335758034dc29017f5d4770

SHA256
97797fd8174c3fd9c5f8f3b55dccaeaa0bc8c013a2739e18b183fb79012a1b0b

SHA512
45597afb33d505a392957484be2eae679a22ceaaaa2f53db75127af4e9170a437005cd377500fd147bcdff5152b5dab35c24ee86d0c9f4849a83c7986e8a3b92

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cldr.md

Filesize
3KB

MD5
b1112e263f7437baa17da440bc5f37ae

SHA1
7279847e15b8dca03dc59bb4e7093a09b8e863a2

SHA256
2a975e9916589324822394e68aa2adcb0371fa1fc2171fbfa940c8628ba5da61

SHA512
4ccdc088d7bb8c93880a343a3faa02ab75dc969b860589a8214e1f737b124c4fa29b0b686bef14a6191df7c792e03b3e01b62c2b3531d819cd8d6f6179879539

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\colorimaging.md

Filesize
162B

MD5
b07c81db5e2410cf27387374d39e7c82

SHA1
ea6dafd9a57b5ef5260e8dfb1cf738cead6aca57

SHA256
5db832a3f9a139118396be758599f9a3480940b57c391d8d42d6d0027d954196

SHA512
7ffd7f4c6b74c5f403a026ac234d219a8c3e384402ab2325b22d11bc73edb4b0fcf551b706f617fbc51f811a48a8ceb011d11250c547643e0fb040312cba2f92

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cryptix.md.EnCiPhErEd

Filesize
1KB

MD5
0950a56c27a80350d1470a494b9d126f

SHA1
50c755eb8eac69794ca7c7db5172b371e9c5c4d5

SHA256
72180ed12619ac68ca8939832d89d3fddd3b4da8b3756b90743fd20d789e0988

SHA512
00f13be7d3ab5b25ae9a832c3642df799256a7655cac1ec9fdc1faf2d257d41fadaa5b21a8c663f682186d9d64a2c6aa6d76d5d348f53b73b8e7b97e90300bfb

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dom.md

Filesize
3KB

MD5
57046171e90e4676afce8a9a78e59b47

SHA1
c4a5752c348f21d8db32d91193cdeae3be1ecec8

SHA256
1971404e7d51b478229519516d87ce170baeddd7a030fe7ae10bc868ce3d79f2

SHA512
02e11b93122b586aececfaf3b0435b6a961d318ae59cd49196c9509fba1fdb7fed4ccba629c8bcd3c128c7cb755a6eb361152c80763b2e3c037ee03854f464ce

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dynalink.md

Filesize
1KB

MD5
20b2bbbcd19a1ea817dca0c8d5c348f0

SHA1
241c743fa2dceb6f55f1e9c6f6f2dc4a1b295a6a

SHA256
87e9be1104d3cbe32b4d8dfb42232012c477fc131d0eaa40857b75a2e4fb4f91

SHA512
5875110f7b8a8a8657cc21f07df1d05316c1ed611f7ede1da87ce204d5cb1f6d97149a20b3b3d1855ecc5ec7c3fbcc53826d172d926c159902714a340330d4d9

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\ecc.md

Filesize
28KB

MD5
1af95843ea7dc314f899a64668831bc1

SHA1
1c1fa51706d3409d75135984970a42ce36803d37

SHA256
fd54393183359b1e3623b9071ba736294dc1ba1b8a6a47517a92455f70b3e134

SHA512
39d13a8483c95d14777f063290f81256937d1176462a853229f6be431d746a9ea816aed308b47720733efabe80e68df658e3e4b71c78c8f83d862d2a3fb67de6

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\freebxml.md

Filesize
2KB

MD5
593b8c180df8cca62c00e4295c3fe36d

SHA1
27b406a360a67afafb3c3e79d304d36417e9fc9e

SHA256
b4b9e573469a57e7ed6d54f7c3bc27ee4d73c33d69c9f89b1c993e4b6344be15

SHA512
f61bc9fd789b0c8bfdd2c018b5f5dc0bb6f6a17b1d8b581a6c7233f189146bd7aa40b37329c32703ac479dfb4a53db41bca25241b62de1bfeaf977b50e4af1c8

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\giflib.md

Filesize
1KB

MD5
0d4ef1d03cb6550c34b968cad7526788

SHA1
0208daa35741f53e87898119f9e43ed8732604fa

SHA256
a7170a0fef473c69af06f7eeac108b8041b90faae9b4b5337773b034c252839b

SHA512
13b3687cd878fa403415cc72a0a3084474507506cb807103d556cf2bdca77b9d30243b4e61e1e8231d637715da6a6792229e8a9a48307264f055a9ad04c2ccef

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\icu.md

Filesize
2KB

MD5
6592dc5da2713f1e2495f9f9493ec046

SHA1
a74d4e3bbc7cc6a8bf871af2b5f419dadeb74c5a

SHA256
02d8f21b2d3bd5e1472db2c1b6ca859bcc8c84224d13bba4917569cf89696ddc

SHA512
91f3bce9e937b44e7fd7076c050ab09280ec241002a4f5455b8f2de1c6fc0c610a597a7f27ffd20a7a358ad9f9ed9e0739d4b6b34ef8bba0058222c00111b99c

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jcup.md

Filesize
1KB

MD5
17c520597f1fbf82221945e4bea5f530

SHA1
7fe2d1d24f8e5848556151e9eda0c3234f6a63fd

SHA256
5419dc7b7af44e600689538c62d7dc00a192a3f60bc8e46bb018bd2889a3ae23

SHA512
28aa7507eb555d0730023f71149531d2ee842b4efd579df2413157ca565395ecf2f9109b9c524aef59f69a2da5f0cb33d973c9fdf4baddb3914b560cb8460e56

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\joni.md

Filesize
1KB

MD5
1018786cb6d3e8da02a398489c7676af

SHA1
65d5edeb2835bf5613a50af478fd865d9b578611

SHA256
ef2513bb0d19b5431c0481643e6ad77454bef7f29b67aea66c346ad130bef438

SHA512
3fa3986af7772bc8a5fc1b71d8f6e4e22ba989796d750fc53a45f0c20555380207e7050750ebebd633caeb7d74b7ceb1e03baf6a8eb3312cfbd7ffbc8e044705

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jopt-simple.md

Filesize
1KB

MD5
0030ef44002072111817327390b43c2a

SHA1
dcc69590b24d8f5264f5c5d8f0f574c6b31ebf03

SHA256
ce7adc503c9f1597d3207894422077ee7320d3aabc1346d4119178b2d9d712b7

SHA512
5b3a7eccec62402f90a9a9648aa419be1da294404b73382d103e156e717fc5364d206a937b3094ced4a339cec673979e665e9bb88cf68b2a3a777f7931b2495c

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jpeg.md

Filesize
3KB

MD5
c99413eab5b3f477625036b48086a5e8

SHA1
be8e1d704f12909a07e15c7ea2568f737ecf77f7

SHA256
5461fdd028e1ec0781fb046fcbeaab8ecf688ec6f1234199b002d573a94553dc

SHA512
c82c2a4e2612ca2a1ec6cc79e22d60a567b0d04de3dfd8ad159815e950f76d6628aef7c2d2f754fb81526498dd99d769e79dbf59548592672c150e1e98c44687

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\lcms.md.EnCiPhErEd

Filesize
2KB

MD5
df5be46995b47bf47b9a2535f9ed5f0f

SHA1
d57445550531b9689279f9aa89cda6c0e3ac419b

SHA256
9bf9926e8551fe928c09373d9e1d49a1d163ad7f13b286e4408a4c14c68bb542

SHA512
3242323c066afa3ba6732de870386ca8175065ef466389831300a7c9e76c1528a08bc066236bace992f410a4876df750dcde517254f72dc294b9a87c825e5cf6

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\libpng.md

Filesize
6KB

MD5
555adb8fa053eb8721b875c6766e40c9

SHA1
ab93a80eeb8fba0e012637bdfd849d85d314caeb

SHA256
69e88a50532e18bc7d3c06734e905e7f099d1a33c391963367884f4611bf517e

SHA512
80f0dc22e9ebc2221017d084f127cd8fa6131bb1f064ac35ceb2c163c7dbde7865da5cfe6ecbd5a8ca617f3555c3b0db5990f0ee7166ac9fa596c9098697d109

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\mesa3d.md

Filesize
5KB

MD5
18898a7e95893b1bee34c07b1a5f72b8

SHA1
be9ddca2630b04d762367ee71a091fb484a25005

SHA256
8689b41cd7590626426734ebda9b17627978c2a2c310593b1510f2fd0fe79de0

SHA512
9abcfe8331acf873783a4086fe7cff507208e0f3e04b02fd7d14694603c1674bcd5cf5d528ba51c7ee7ecdfbe38974b47efde57f9bd164c1ee8586431ee037d4

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11cryptotoken.md

Filesize
3KB

MD5
f75715d22e766da92a0a5003f36462b6

SHA1
2468f6df22fc04d9e0af8181c8b77d04c020a8d5

SHA256
29dd612f416e24b083f0be0182407db676136d2dd925c75342967c1b3453e745

SHA512
4a92737580c1222c7303631442e7750da91eb3ee282bfa2cb69fa8fd906b8fdecdbbdc4c19978b309810d1714235d2e030aa796a9ce5ce6ea0aa31b479d4ab08

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11wrapper.md

Filesize
2KB

MD5
39fd22f656c9e2a12b548552feeb7552

SHA1
13755b29fe017c53e455ec3eeb0e27a3ba1dc25a

SHA256
130a9fba48c5df74290a1bf034e25fa1198253eccd2889b7ef0f482620a67f9a

SHA512
0b83cecb27a4565a5cdd4a77d4707f8728b283f775de343703d918330b4df12d4506303e243b2300efe0594b7fe295fbb1ae707577bae1b2def057f161472f26

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngcc.md

Filesize
2KB

MD5
c84bcc7e4dcb638cc9ed9c9ac36d992d

SHA1
d37ac21d2d41f0fdfde4327f20fa3feed4feb3b1

SHA256
dadb992180805829ccee28433194540b23c6b969afd4714bb7e179333c62258f

SHA512
16f5b6097b25c87bd5b1cbc54a7744c9dbd1c00e6a16fae2bc7a320c487269d0b4bef6f2411532df93f899c3aa84c4767b5fa47cf206e58de626bf9a4b52f219

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngdatatype.md

Filesize
1KB

MD5
53804cbe7ef4074fa4d4f6484ed98973

SHA1
facf87d81e67c78bec1daa2321af39f48ba4c7aa

SHA256
f08f5237cb3788f3f54f8a831200491bd8bbab38c3861fb6e0e90ac0427285cb

SHA512
e46bb050184f909943e74a81bb9570d1e941eae1b9cdf8b6fb627f554cdb28de1f4feaf3eee7422ef14d222bff380a1d08069b411a27727f996062a4a76bac5b

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngom.md

Filesize
1KB

MD5
ffd6fb4d9a4433acc8a655669ed54afe

SHA1
bd32907346126bf73d4490f83d86582a39551df4

SHA256
3879401bfae5e86943e38220efa23fdfa20f820c681ed01fa62c493b0f2606ef

SHA512
918b02e586b377c828c2cd18cd20806c8b81b60d9bffa5954b8028e4a6d594349ebe89c3cc9cb682ee6d3fafbcd888c8382a29a0e922894082e0b6972861970c

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\santuario.md

Filesize
11KB

MD5
2672b5a5a33431e66097e6f4aa039e8b

SHA1
6498feb55a036592ee7dcf13c7939798510d9d9c

SHA256
a95c7dd1720e20990c901b3ff6e7493b19a21173bf44ebc004863d546bb3a716

SHA512
15527bfb0c4d976d31d1148485ce206440781c8860401da55a91193c2334f9787ae2ef1496e2856d57d1064f48d44a6d200a43247a80f789550666fd2047749b

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\thaidict.md

Filesize
1KB

MD5
82a4fb485b0c057135461af3bc934761

SHA1
314d53385c3515e96bf432901250c8922270ae75

SHA256
fc7af9280421c2aae2176c3eee7bb92eb8daf6bd58dc41141bd61ade472fffe8

SHA512
c0b946cdc94bf92d3dc5c706ea6169d393a60d17989f4d6133edd822f9ddb43402e378fc81aba0a52c18bf4d36ba53b3368053cc91bab816f3c149531766e3ed

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\unicode.md

Filesize
2KB

MD5
4186d497eb00a3fd6dc69907160f8fc5

SHA1
94147dc172144f0de18a083532bf4a0adb173cbc

SHA256
aadb76dcbef8f87dcbfdb7fe16bfc388e5721c86f480afbc958a6d49116f2c43

SHA512
29bef1a8537400f7684643373ce8dfb904ff27ca7ff12b491a612e200e2602fb2e0171f52be4119ed8c0169a0db0d0bea10d4eb2c732d8af1a051431e2cb9fa9

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xalan.md

Filesize
11KB

MD5
6804d9af0c63666d32eb1766e40c9a23

SHA1
53c6a195bfa32ba9f4d37b2cffe1d41e202d9054

SHA256
f572b8fa041a85c472aa2d7ca73e1f4d972d52c6955855fca790997cbbd0171b

SHA512
ecc2ee0dff83f4fe6f85eaf7676db2d05335cb89724de2b11bd47a5e0cdb9243521488dc34606967dadc2ea111d6f2b8f030a5b830264075b42b414a4d63555e

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xerces.md

Filesize
11KB

MD5
c4ccb6978fb97ba5d1b83ab81152118a

SHA1
b3349328bee20562a3a4acc5177018ef2485958a

SHA256
05977b1c0f9f9433fb90d273c199268b45d7d4bc35fff41aed18521031086381

SHA512
1c18196e9e91effd7a57bd36b0ec882e1c61580bd2f2489a8c96dc4a2538030185d5b30bcce736699e224fba976600bcaca84576648167a3ab7deaf4956dd712

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xmlresolver.md

Filesize
11KB

MD5
7d8b1d72975d6c17fe0d8c199b23e173

SHA1
bfa35841e4d9db790a15762ba087a5fdef29a6f1

SHA256
7f60813482c17dd3514ea48e569742e43d5208740d3004806c50345fb8c6dac9

SHA512
bb38fd8f0c8db91b59a5c71f1e46a24c97c2e831f8b9ab41ae4ccb9300df9a67661c860b891506748eb6877a49d55f5b2cdb34389ebd89ae1be72ff512c8d368

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\zlib.md

Filesize
1011B

MD5
55cad1a5dee9aa39a7ef9cc0f3dacdf4

SHA1
69f66e203c65a983922b9961f5fc2f2539dc996c

SHA256
1e2eb195df5a95941db2e1dc5c62f97b42fd7106dccd7a0d7521dc979c31f89f

SHA512
5be9c9e6aeb8126be674aaaf82fd85e6098384a36421cca4ea033b487912d83e8e1d282ef46d5d64014b9ee76966d48e756a3b015a51cb5bcf478f71622b0e32

Download Submit
C:\Program Files\Microsoft Office\root\Office16\1033\ClientSub2019_eula.txt

Filesize
42B

MD5
662f1b2251f6985cd7aadf84d33649fe

SHA1
4f622c9344a6cbec1ace86e6fa9411e6611e03c6

SHA256
2adf5ccb326c4d5caafb6ef51af170f190787229a67ce26e8ccc177b344a16ea

SHA512
66bf9586732c627eda9f559edc7463d713a4492d110342b81a574e1876dbecbb63eba039c4b6198f44a229716fa5c4a618c6c3c92f1c8293ce368c8dbea81db5

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727662610078916.txt

Filesize
77KB

MD5
14f285b4c0f1b7867fd2f214c2127a72

SHA1
f19f7ab00a62315e2d173dced7fc68e309a61302

SHA256
26028228583968aa14e7a24b1af021e745070066caf6eb4a1d9592244a5f4996

SHA512
6fc20d923ce1ee5c826674920f7316154554c67b633112ca8af53fe25f7c4c933c12b81a1b1de91e24269e5676e9e7663c926024fbacb1c5950fe396b650e40d

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727663116015387.txt

Filesize
48KB

MD5
7bf9e8899181bc779225c065ef6d6517

SHA1
e2ab2170591e3077a3a453dc9e23db429874be7e

SHA256
e6015850bde132a5febf741bdc553af75ab8c2f880090f7b6d78e0db54a8bed5

SHA512
02fec609d21bd61520258b2d2d76b598ee6a8c206b36b9f80fe4ba763d0194a7c03f4989131195a33e2df933a0fa203df240a696c33aaefa1fed760136622c73

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727669820222616.txt

Filesize
64KB

MD5
33d8d11e0d659f35de5b5b7873f88412

SHA1
f63bbd3fd951c32d2dc1541a8c349ec991d0b744

SHA256
050339a9156a010e27e66121b7f74ac18a7d080f7f14c97786cb5b8f49ab7b3e

SHA512
5017c4f45fa233fe5135091244af68affe3e13b3b8ef7451f9c50e21c4cf24123e64df11b3b9aba882ba5f71287e952f34bf955f2bf79c75151c72709f799bee

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727672589120253.txt

Filesize
75KB

MD5
327b1cfbed5f6b9e0817efcabeb27028

SHA1
e90b152f4afc124e42e16b6ba8562b9e21dced5c

SHA256
41d4bd4357f48a70d214b12a69d07628fdc72849c45949e62bfe62c9fa58925b

SHA512
441bd62b73c2dcbaab5c385e9c37821ba75262eae72da49f9fc0e14ced34e55ab4f6709f6bc8ba94d92828171dbad2b930645248eacbdcffc9917a812622e882

Download Submit
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk

Filesize
407B

MD5
94d192a982378bddbe69eacf00ed7c9b

SHA1
7eef9de6e7b7486ec809e0de4e5ab65430c59965

SHA256
542939b40bc7f3320a67955109f4043d9ed426a5c4ae1dfb886a942d9e4e59dd

SHA512
1551adee18a4e6589f34407669726a6b213b3c5de069a4bee9d23221233099381449b9bd13aa3b5daf8ee3b515f307efd41d108137c1237871eb00718e256634

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg

Filesize
21KB

MD5
2c2fd068f524e5332ae2a41cbf73e215

SHA1
f30445437ec61564dbdc9bf21d4b4fb05487534d

SHA256
1f15e91e8adc838e5b13fca6ad0b9cd0a328f0ce248a1e6d7c89099145f4adb8

SHA512
1292abc99248a163d9f8264abc7676529806e6798c45eef23be803ad877e5c368f0910e90117e95418fda1fb146d63495efe0a2745b06f9e6077a86f9ec7c318

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif

Filesize
1KB

MD5
3e825ae640ebb6a217ba73fb186bfb9e

SHA1
a992f5f963475b82d789091eb5d8d5936c31afba

SHA256
48707af175516503714c9c1d18049aae6f761ce6c7461d019b56075b34e8e6af

SHA512
295b6f21759dd6d6beb5abcb1e1b8ce19b1e1ab238f249b0c3330a95c62d7fe7148a7d41695045eb04c95da1ffe14125146f98133247d605ced448506df627c2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\alert_lrg.gif

Filesize
952B

MD5
f2a50aa44ac7ad67c3bae09bdf0f96f7

SHA1
aa88cc10af5f5bf5ed47190cd845c34c4d3accba

SHA256
efed7f6bcda851d77befb1356828a48bd066424a34b22844c546f6fc4be8d3ec

SHA512
148845d2b20a7cd9a59d31296cedab8c94cd0b329dc203d54fb71e07062c55b140078b13ed58402321512e69b20f39c1d9e652ba069a84d27057463e4f902208

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\aspx_file.gif

Filesize
121B

MD5
1db11fa054d87d072bfd6faf3706c332

SHA1
951c8db8d492e90de22cfa820e659601eec68f09

SHA256
9e153915cb4b01c7b9f90ca97f7ac9cc6c7ab1c512b96c4bf1ea710ca681e54b

SHA512
83aa19961b7a9bb51043b231eaaa8a2aad3fda4a42522b7e6c0b5f7740a8eaf0795695eec6dd7a1e05fc899d19f99c38886cad3c76606c84a8acaaf85e3b7268

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\branding_Full2.gif

Filesize
1KB

MD5
7f5581a9bcfc173f8937d19fab93ac4c

SHA1
e382f0d322ff1f620d17fe83821c3380b9ce4bac

SHA256
63b7929ab0b3c211bd6d3cc3b6b16d8a3972a349520bf8de1249a48a5a7451a5

SHA512
8c0fcfef881f5571560f6d6c9682418e9b6331863515304794eaa81b51435a5561dccacf8beafa1e7a4d37c979116137a8e503b97380cdbe85eed2beedc6a28a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg

Filesize
8KB

MD5
abe137245f71a180f3e9ede7bf5eb048

SHA1
d9f6bc37736fd54cb40ce6498c3dfb25738b5f40

SHA256
54eb68cde208b9a55aad49d3334a7e14f351e273924ca88954b4399d852d9859

SHA512
a783747cb2152a299b78cae09d4f6c9824b7e0c1cca5e08f5f15344c6fa9220ae7005e5b312379959563d8b21016e84585540c4c63033a75cacb239a7856100b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\deselectedTab_1x1.gif

Filesize
61B

MD5
72e459830915cf8fc0722bca6320b618

SHA1
1aadfd4275b90d355a33927591986964d4deece5

SHA256
9613b092f5936e77c4260f4a678dda8bfd21129eba3729ebda3cddacf10d16dc

SHA512
a3b740019564f52f253080972fe9c185d52f2faaf5030c082b3eb62499527aa209dbd77ca173027081ad2d01d45fd8568750481d5dd126a1edb0cf1ad6b71c34

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\folder.gif

Filesize
914B

MD5
bc0c4da994ccb665866361bebcf17ac8

SHA1
63d0a222bc035b76993819c9ebffdc4bad085bf3

SHA256
91a4d503a389cf45e9f6ce8a89e8bb314155e384d97d65e045e7e5b858e2489a

SHA512
20a9041da76bddc2d9ffb6753363148228daf8232e653926bd0212a17685c5e5b2d5ef43acdc760ce48717c91e939cb24786f4467fc840573c0d9d9e4a910321

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\gradient_onBlue.gif

Filesize
90B

MD5
9be4657ef11e0132384fc50f1e8e2f80

SHA1
ce29dc102bc67bab6d6120cc7019cedb33ed505f

SHA256
1b7132f774775db013bdac4aec836337b167f061467c592cfd493a48029e7437

SHA512
90bd47514eb0fc45e167044d8a0f9b4fd8ac256bd87ed5af790673217f4fe14386b8a582b1d4d9cb32c4d6f1dcb75f97b3bf9cb391eb0a8513edc6ff4a9f4131

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\gradient_onWhite.gif

Filesize
90B

MD5
5b8ee4d4ec5e95da39264d7a7a35e8de

SHA1
0490f3b102b8b3f762bca4680558a397491ebbcd

SHA256
3b10306203fab8fca07279e2382aad28c2cab8585ac332fab9b0e85dfac5a4ae

SHA512
94587978a3716c2af0d1a76383b12feed92f6b7f837f5deaf38283b9aa73f90a9c80cc5866c10dd5962dfb1bcda7373866b4d8e74ef68e337cac0872c6bacb92

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif

Filesize
328B

MD5
65f073833626dce9ca83a3f96b8ef8d5

SHA1
1842ca57ea9bd96460f1c18c801ce14ce152c77f

SHA256
74cbcc90e663f6a9783504c739f4645622f75fb5b5a675b6e3c6fed411b5f40a

SHA512
00752dd370dd4c536b200f50034894a71bb11e4b88650474841951772fb83cadd1678ce26d5b9d2f079e2d9ec0454f358e139a767cf8af53a65a312aba748edf

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\help.jpg

Filesize
1KB

MD5
e100d6c7dfd0a7da124c840fb938d371

SHA1
e085f1e770d156e3020a087cefda22920e5b4fb0

SHA256
5f07ef05809bde2683ea2fa0dffbdf895d6d3c6a254586f4e768b172bb6ea445

SHA512
e5aaaf051f17af3f1b02c7e36c92e7b88e75d9307e23218b989727851f89e624bcdace20088cf1d6eb342b237ebbba1e767bd2ed9f0ddacd6f387698bcb591ea

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image1.gif

Filesize
162B

MD5
e7a18c2f4c8e3fe1161c942963ffaed7

SHA1
6bea4ce39343dac6fe9cde49f1009f048a2a081f

SHA256
ddcd34fea2c0e57cb902d5c9b766c2559c45476ebc96567362ab1239567ead53

SHA512
53f6f5c9a20703d573f4ce1bbd8e39741e1c3b7def7af52d32178bf01df349ca75b736a44d537da4fff8702d649f4ead1745280f3306198f155d7c9befe41f0b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image2.gif

Filesize
586B

MD5
8b4aad5ab3be8b7dc2b316d9e9a72d09

SHA1
4aa82277db081ad6c3cc63564fe654d946cc4f5c

SHA256
73ba6ac2e33192f67e0db315a8846ed6bb7e2f464d2073680f4df2d312d75dfd

SHA512
7d28af845e1016a0baf3398c4ff072dce9001696328a7c153718ea4c63b3c592257e11e2c454d0901fd464357a9052863b0d4abc8b96a2184fdcdf149a824976

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\requiredBang.gif

Filesize
124B

MD5
fbe3ca6cc8d02b36a698c2db5aba23d0

SHA1
d5bb63249d6c94daedaa90fbe2a758cda2715b1d

SHA256
36c4eae63ef34898cd6ef68aebff4b5079d066dfd0adaa9eec83bb632d8be612

SHA512
52dae005c4d6cfb16a47d360b88103049152cb655d2100604fbe5002f96668f43894bc9fcfe7785e654ca88a03ffaac42fdc73b5e04b24c81a0cab483264d2f6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_leftCorner.gif

Filesize
65B

MD5
eb86f6ffd10185099854555729c99877

SHA1
50df23407cf5d1d7a8ffb416d1b2b251402e4eb4

SHA256
500d4d101755ea3371cc5d23e1aaba43dafb1ad6785ccacc55c6a3b3dd2a3e47

SHA512
a255a34190e5f6e31baab779d98ce2aa0278e1c9a596191d331d26ffc8233e456e6abc69bffbb087ede1fa348af5ff57a9244e73759ea9eaa30f9faebaedc9d2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_rightCorner.gif

Filesize
65B

MD5
6c9c54935663f5553c20dace59be3ceb

SHA1
db790a94c7a17c9142cec1ad24bae09afc287a1a

SHA256
5c9fd85b311ba4fd9abe764191ee7ae7b75e2e88846569ed559d3dfdd8ced093

SHA512
d33ab45f54dbd80bab13f18a14e636860459659e409176442ae50a3d5bd3516692d5619dcf78b17f43594b168bfd3552bb2ddaa053d90033f9cdb8d4716e71b6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg

Filesize
8KB

MD5
6dfedf5bfdf93927fa00a057458eb430

SHA1
a745b2ebba2a9d5dc88d6da8c04c0241ad1ea2ae

SHA256
957fc49c227913ed05a41b22bf4554767b31f07a9f0a72d67fc814bc162b0671

SHA512
bfe627aab1de05df811c5827dd5e1bea5b51978599c538571fb031e6a6066fc3065e5e94d2d9047b288c2e5fa6da34dc5e5b40d30d2c483d894c5357498f0d53

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\unSelectedTab_leftCorner.gif

Filesize
65B

MD5
f35cc3f590d17d9d05af3a3acd5ad77d

SHA1
a59367e54e1a352357d8994bab3d86a5d7f0f22c

SHA256
ddd0ce99ad7959ed9116a1ab2a22ace8e2b1a6fc6009630609e69e8e2a8427e4

SHA512
3e8265522874af4b1033dff9ddb7d5f2ffc1e5a9eddc3472ba095f7a2e29236fc1182523bc259e5909a9e66e5e73a860cfe6b413fce828dd79b7f445c6c0af09

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\unSelectedTab_rightCorner.gif

Filesize
65B

MD5
681c0f8b85f40430dfc76dd8e758c97d

SHA1
109a6f3339f3c3b242811fbee27e59046ac7d356

SHA256
2e0c9fa07b7f3816d7ae96c40780dc45ecb505eb9eeff5da4da8c66aba8c3c61

SHA512
b84f57bbb4cfd8babc5a15d74e45c811412f666e7c0a1f71608116c1daf68f373246a5ce2ced8a7ef5ad3857afb589b2efba3073bf67ebf5ad29713374244e32

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\yellowCORNER.gif

Filesize
880B

MD5
4c8df2cb1d68e9e259353844a635e39b

SHA1
9c4b6acf493fc9cde5c9d8ed47a6f74a45fbcaca

SHA256
30be586a98fb440ec309d5f003b2c9df154ff83d823a6af9aa27d2b1ba6c31a2

SHA512
24d9ab48284de9cabd5f2afc29e76069dd4d9d7e3d21593882727b0bfeeff561f8d98a3ea4602d1e55884131f0385415e30fd71b71d8946df4361be5ae758589

Download Submit
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\security_watermark.jpg

Filesize
49B

MD5
5fc260f6c91e5d2b3a55781f4fc4cee8

SHA1
a2eddecf56742ad8e2e902cf280018b8d959d421

SHA256
5f929ba9a52e20f177bb823565c73cc3087c38d04b5c820d36c7734c0edb9375

SHA512
0e01b16d3ec5982596635a02ca8fe195862cb7da57e3f5628ec276d2a36745a0d25282250ed483817265af34de1ccfa7cdaacbc36f2f54857af4471f4d384b93

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk

Filesize
1KB

MD5
a4784b5c4ccb24342f9685fbd7a1999c

SHA1
e2e208f13f4af4b26d3577dcfd2b8ee7fb772cf4

SHA256
fb100deb3033577e2c924eff804b06c877cbb0692ef6b087ecccedad62c19cf6

SHA512
1d8829b7fa4354303690c5f1565138f396fb3b4637c5cdfb0e6abdcc41cfba3152ae17ee0510a3bf84ae90c9358b6eefa954bd290d474610efd0843a3fe9dfe9

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk

Filesize
1KB

MD5
87c3e61c3574d241cd14067a116179c7

SHA1
c9dd48d38ba7c342c7d7b970367e7dd011326b04

SHA256
69e3fcea8c8cd065341ea720e0277ece7da2a508294987768eab55f6f8a7a7e7

SHA512
8b51c46486187f17d479b33f5426cf1eeccf76593290cccf4441b491970b4a2fadaeec628ebeac4f86027b0801de4d3bed7669503a05c75912168328f302d62c

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk

Filesize
1KB

MD5
5fccbf185f9011ac1419f44c1583f522

SHA1
c27b56b7b5285073fdbcf52785b4a144fae1f4df

SHA256
51df6bbb802a8690f66986e3bdcd455c3d83410cd13f8f84a286ab944b5b680b

SHA512
c870b1938a684303a4f8a6b5bf626d28dcefccf27047759da5368935f1c7ce7d85782855bc004f0a4993ec7fefca0c99cd9bb0e92f48772821a0129d3b8d3812

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk

Filesize
1KB

MD5
d426a7a0d6c3b803c0e40c465d5b294c

SHA1
92dff20a1c221e32ec0d640b0b78b4e001294d81

SHA256
02b8f89c21ef29d4dca8cb39bc3cde2d3a537df9f01ddc1f54316f9d7b62dd7b

SHA512
d2eb5cc5f3d363e2121f9b96def7dfddfe10033571bd523f2e7e40391a4e7791f04f84a245ee94825deb262ca91ebbe09e754b72762ff4b16be263947568883d

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk

Filesize
1KB

MD5
7fd1744b2539a9cbfe2960699aeab7e0

SHA1
be72ae5ce45a31a7f7a741761bb2a8224fc689e6

SHA256
1eea2b05113d915010ff6b996707383cde314e7a1ad2bd63e2ee080b463db625

SHA512
765af188e9dcb9fec8d33fba2fcdcc069f027beaf53295995bd70c1feb60fd7d5bafa4833a4e2da30573de4cc7eac4453565bb43accc5bec533c8e58a4e262e6

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk

Filesize
1021B

MD5
8326558390cac06951755443b25f4e4b

SHA1
1f673c5bd088e6f405999bec12162fe0bfcaee64

SHA256
8576b74824635501b0a8026d14e9786b9bdaa50e6fea173b025567862da9cbe7

SHA512
4eff7b2455b813d4aff3ce44d4ab45a90503e8bc4577ad309de3561c5fdf02ff8585c029a6a617a92142188f013c46d2d7571fdf3907188556a1a575d8a6bb72

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk

Filesize
1015B

MD5
26fdb12a0346218bc2bf4f059fe907dc

SHA1
c1c0f6ea177388272cf4c06865e1b12104db86cd

SHA256
8079fc4c46ecb062851addab1a95d76bf591cd26bccc2d9590d1a98d3227801b

SHA512
c86e9a133f689dfd0fe49fa813099089a64450d4a73c5d88c761845ed827bbaef74a94fa27023bac676650491444cc942c5ff85330073de5b9b616a552ea9d53

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk

Filesize
1KB

MD5
a6a93e46a71c022bf5100f09df9a334c

SHA1
799923728d7b5649be27878e5ce79ece401adf7c

SHA256
cd7667e42705e1aad679adc435ad2923047d49b97dadd57bf48b370123505d4a

SHA512
a159fd3faf3cee310e09d0467cc9c31166bb2b7a7c140c0089fc4831a7ca84f43ec58f1ec4312a8728d7b070130f649e89bbd1e57705933c704eeed4c67e28b6

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk

Filesize
1KB

MD5
ed99c973d14b2f0fa7d64d6cc534d9b7

SHA1
d0ad5871b2a2b9ac76a43acd5f51fbf589207987

SHA256
2d8a2958db25ba4aa88e0f3e137f32a27fb1fdcf4e1542b48f9a0df2a848dcb3

SHA512
b3fe5441af7bc72bff8f484ebc242cdf35117c2702cdbfe6bc922aab92ebe8208086af12dd4e0aeb809dc91ed81f431a025a4eac9c86f56c329167289c0e498e

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk

Filesize
1KB

MD5
f23e09533b7f97916f46b7e4abeff3f9

SHA1
945ad8f32a3e6040791ce37892ea0ffe5860add0

SHA256
eb57d9eecde3438700d28e637fd80463e0f7ac6a5fbde22cc891f013b8c4443b

SHA512
08bf49e34206d716f7d54ec51777b074a64f40a0dc7c96eedd24180c4c8ec8e728b59c7ffcff25c80cbc26680afa9dbf21c3c4d0a46571e7892b9a6cb998e8fa

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk

Filesize
1015B

MD5
367232dffc1d49a6dfd404f460992fb4

SHA1
292cbdda26ed82152b181556328de87b61afd9a1

SHA256
1122de2819964832880bd5d2a82417e7464191055244213c6d6d83c084804865

SHA512
924178afed67849e45878cba448bf8fd0ec499f550f2c6bb2f4338da35cc09027922ebac109d29e3530077a30af85ab0b4f9fd6bd2255d97738cb24d34be9dde

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk

Filesize
1015B

MD5
724a0966bc44d302fcee5e13383d6773

SHA1
432b80cee91afe2932629e889abe99db4b8364c6

SHA256
16253d4056177a44e92b8a5abceace4d0438ef184ff1c056b90c76ae02c3d876

SHA512
896d791f5063e8dfb3d192021716cb843f7dcb4ae28e6e9a26c383f3efca89d0cd15d50df81b259f3c5283a266139d78fc69b99b19ffdfbd16facf807c2c0aad

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk

Filesize
1KB

MD5
3a555665b9fe8ef42207e93d392ceccb

SHA1
e0f658279965febb2822b11e49d715ab0940437f

SHA256
12915a88a00d15d5b2fb6995085c2ba8951288309cbbbb428cac44d9d8d46934

SHA512
86f5b98d768f4080997494b7410cbfa90fd96927d14b78ab3f14f64de69fa7bfd9766c2dff4292afb45aa0b436eaee0f3ede852b1939c99f465996e14b4f0103

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk

Filesize
1KB

MD5
5b71e4bbfdaefd4fa39ed838c5a65916

SHA1
0f37b4780bad7f2576bc90b03b7e90f7eaf1d921

SHA256
07c61136ba6d1a8ce04e7b51e63f9468f8662ad97e6c9ea2ecfb03c91b670ada

SHA512
111fb69322f42a0243326c549fb9df1ceda155101aa524e6945806b26dd1452b1b30a852c51255c338bc051fd0977e1eb666be2b7bc6110e3400dc1f36cf1e6c

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk

Filesize
1KB

MD5
5f2aa37fed36a4133713ee7ccdf0cf2d

SHA1
e222cae3317455171629e4f2d0aa9cd6216019bc

SHA256
6b2d86222fedf3dbf52a21b765f7f110c6373350be64e2c668e9603d8f95e948

SHA512
326c986c0ab82f558e213c1c424734d0712e39665e4154729426779296ed84c8ed664569297b9379aef7972e3b8d13ffbfaf04dda4c325caf58810c969d20977

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk

Filesize
1015B

MD5
b42b8db7c2aab9ad607ae2b2430099c4

SHA1
6a439b59b5abf436ecf37515ccf193feac477026

SHA256
f70b6b8f8c2a5f61b10be0a30ee5dd8102b82228b96f7a264ec96b72658f4256

SHA512
cdc05a4e7794559e5f769c8ff7aa77a57e4b969decd21cb7f422b79e7017bf3acc66ff330b60c98ca340972844ab17a40109db22f97ce634cc75ad67c93aaa47

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk

Filesize
1KB

MD5
fbc00334eabb6384df5ec30218f53744

SHA1
7c6a1f043f90140b2bcffa1510c48f41eeae65ba

SHA256
80c3beb3846bec48642c5aafc3bc2a78d894eba07416961d1afc68cafd6688dd

SHA512
4812c962042673c49d940611c8c955b4efc193151bccc0e3ab2b95f9885a9d866477ca1345ea2c2c1cb37e63880eb8c489204b03d6fafe93a764365b8cfa45fe

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk

Filesize
1015B

MD5
759e981557cc9b3e32259c6dfa715f11

SHA1
c96671d7cf977e6d2481a54ece948910750cfa73

SHA256
0912bf52c007f662de8b8feb264d583e94ca4b8d901f6e52a72a7e7154e107f5

SHA512
4f8a2fd57f82ea1a55d536613832ef78110d92e9a6a758acf799006b3b80988d4139495bce03b0a783a5b2b4bed61d57ba9b74164aa047571c5d202405ec7bea

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk

Filesize
1KB

MD5
0af410c39c7500943c4071be834f53fe

SHA1
c58c6bc9c3cd67f50d0077854cd572bed29f921a

SHA256
e71baca73ebf5d229d3df1a97a5b3a255ed686796b17a124bcc10483083f6547

SHA512
29188f149611ffd0de22afeeffd4f30b43b43f0ba21a5a0019c9d3418aa8f1229fceaa656e46753af6b30d912e8b9f3fa90ac2b63218efb992f8f3ad5a00cebd

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk

Filesize
352B

MD5
39bdce64713277bf60bc0299e4c66e52

SHA1
6d1362da50f67f6f353e2b1dcde18f2b03bfd36c

SHA256
6a81a4967e822745077d4be59d3a3f6895c81b83aba3dadf41ded724c9487e56

SHA512
dad99b237d19498a801c186312091253c5e7ea3c0124447c95a6844fd8248d5af0ac7d8570ba9e94a100cdf9d01f688ce721844d2dabfbcd50f50d902d83b624

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk

Filesize
334B

MD5
0d8966b77055a0169556ce17805d85c3

SHA1
318739928149966276d3977a54c79611b64862b3

SHA256
33436601470a15542ea3a911ed97a741cf33c3bf65464b3c584bd56dc32e1d59

SHA512
6268f7656f36561782571215f73ddcb4606a9ed2d989695a02019ee5e9e65812566182c95c3b3ae13d820f69fee7b16a0a8e88d398f0d0712c95fdc79399eddd

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk

Filesize
1KB

MD5
183ff296e539f3ba5a7e4ef64b541d89

SHA1
778ac5149375108a1b73f340788835be18b9a64a

SHA256
816c848fb6b0714e1e5e920e58d3bf700bc46cd0c3aae06d19074826b5eab85b

SHA512
4b0a251164138d4d5ffeeb8ad835d205e4b6df07164322eca9b52c949197ea084b2fd67bd6f8be6f2a50f6233b7e0b26de52ca1e88df54b74d4520a09caf75ad

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk

Filesize
1KB

MD5
32a0a49fc9a7e16927b2f74123a5ee38

SHA1
796243dc46c086eb80a29763c477581f13b1ac72

SHA256
a93232670bf669a6c9af7f92a977fa193ed1f701ddbed0cb97bc5a0feb8bcc77

SHA512
b55c80e5f80f15a0428c9c772466db79f4312aa7c91fc2b5f404e25db4ca7f43b1a20bc21f07f13f86d09f93f72cb9356a9cbe67f5ef3c3ed75d18da2e4e2d70

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk

Filesize
1KB

MD5
1a804ad88724fddef33a6b7e48847477

SHA1
b56e1b5e7eb9aa781cda6efc5b1880824fd07128

SHA256
e07ac5b18e4e92524657aa074465b8c720773762587d42f48c346fc8e397e73b

SHA512
cb1307a33a784e3cd6718213e0ee78a1d998438ee63072ab7aa8f295dd8079e8e624ac0c7761c063016f8d5a5dc38ccdd913b1496cc1b33742bae4c50fb1e6e5

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk

Filesize
1KB

MD5
1dcda59f86f066b741bb67341ab306f9

SHA1
7753822990756a44388a0cf1cb58908fb4079bcc

SHA256
d921e12196628c0e64b7755d943cfa236a97088543bb9856e73a1ca7f8a46589

SHA512
53b95d166759e5d12d4269236d4e1ba551b6184b01ba1b0709d9b16e09afb73eba3e118c95fd4a55a6c049288e33f3dea7603922fe1d5363a88e6cfa078257e7

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk

Filesize
1KB

MD5
d4b0026b53448251244dae440e26cb3e

SHA1
b1671af2d134820be14f6a0144f866ac25105adf

SHA256
fba18aef622c526c3b7bc06edd84e0711795f407b293090590d5ac8fdec0c31c

SHA512
830f91d9c870bfa820337728adc59a996c16b1a7ff00c1f80d4c85f0b4bd9cb5215a2cfc0df096910ad3a850323e54842d29b107ca2c0dff08e1e3575ebbdc0a

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk

Filesize
405B

MD5
9ce7d89d3a4550a39eb0b7ed55f9ade4

SHA1
039e6d94dabe8c59f91fb0cd4460f20d398cca24

SHA256
6a5620dc7462e59fc0653dd68981d20e3866aff19744e32459526373257ed230

SHA512
8e78a6699d8565ec440cf036a9e4e2cbc7c98a99b958f7a12519470956ff60a67f13057e1f645c842802e22a7ab1f163b65325ca31e1a51f00e9128acc330fba

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk

Filesize
409B

MD5
5d787e5e6e80da2fd7e408393462fb06

SHA1
7be6db33e8ddeafe5791136ff1259996b3d555e4

SHA256
518e515b218eb818a18a86d5fa9e2a5488d94155dd763f5836e44e410416f17b

SHA512
5d7397d43112065c406bfac6bf9b2b3e19e14addad7368bb83a6e658336fce9875317122d23bdc2d32cb2de66c988a0ce270b7ceeec7975f14c70cf374c405ec

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk

Filesize
335B

MD5
e95a4aeea3007be895d4241970c402e4

SHA1
398dce8b20ab87f555c63b02f39f1fc86df76572

SHA256
39bffd8b28ee245183ce0d3ae844e89ad0703724742ba8e75d264d2c8d92a3e5

SHA512
32a5b460f4abb897b65824afabb4b235f81af3eff1496c275208312fb95d406cd2dbe6939d006cee2d5be23b5177f56db2d0a7738f696ffc65772641687c2566

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk

Filesize
2KB

MD5
b758003c13e6a72ef80dd0a4d60eff57

SHA1
9cd94760fc723c84a74158fdafac0c86f62719eb

SHA256
f5c1ffe69d4fa85af1e0bdd23976c57915cfd94d4828717641f2e5a372022fec

SHA512
7e3210ea4ebfd882374f3d756b7fc7d456c3a63840553e55f69538430b5a49292203b17dfde4b5f101692860cd297e35bbda69538ddf85f45440ff382a9a06f8

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk

Filesize
2KB

MD5
bc4520b771e29d49b4170286f4b68402

SHA1
95b3cdc48899c1d427ac5aa137f8bf8b8b933ccd

SHA256
d87c2e73eec18b268b605348605f7c5afcf214e10897b364c4906a0b0b89ca11

SHA512
0b70c6324e4ef74447ef17aefe7e756f4c87166a893fd9b68a72c326d3514460a9a6ba46fda270e66e2f73d335a325a3768dd73626c6f7a0ab70547b0cee6121

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png

Filesize
296B

MD5
53724baf8031c7d1190fa59b51338ae3

SHA1
f11120ec4d58c16174df40ebe1c5deffcbcc27b6

SHA256
79cc002d1a8cdd0b80a313e75cd29ddf6797040cdccbb94d19ac0dd0304c837e

SHA512
6567a5c513eb5d8dc31b3561c33f5f42ac9bbd2d102a21345d2b0c9318b0417f0b8cc981473e452397bf04aa04355880ce026dfb5a052df3d8718dae89ed58de

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_contrast-white.png

Filesize
276B

MD5
ff6feb4ca353efee5b7536c512137426

SHA1
9d8fafadd668c65e4f18153654f75d6e81e0ed55

SHA256
575a3105f9a06947cf487e054f8ac21aa611ee55925ae6e1f777fb5fe8bba0e3

SHA512
7736e2cc65a8df21316aec0b45a27916a35d9a92f09fbf04e314760c00780a411e24bbe09aeec3ac469572efcde7e5b6ca31a8fc37cc5b17b0e54754513f96c1

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png

Filesize
296B

MD5
e374b8ce6ff7f3423235cd7a0724a729

SHA1
66a82a9434f9e84a3b6a593ae00afd62473a2084

SHA256
5d6afe0223b1cde612e2aed91f1a72deea41508d7e0d4b92c2757d240a43f858

SHA512
fd806e9488a0299413cb98f89b9b4c829714afc054f1cee7739aee0f57c384e170cdaa18167d3be73b201ab5677bc537d642dfd74ef743da79632d95855eddac

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_contrast-white.png

Filesize
276B

MD5
11c740a751707028b324a10f2b2525b3

SHA1
ccdcaa1e1ed0e1ed31442978227694bce6e1b72b

SHA256
e1cecf43a1019a1e0d65e4c3e1308a7b07ccf1ccf47baf4a91cc813ad81b9535

SHA512
3e683df98e60b775872788de64cb8defe3c65955e9ba082818e1192756bc55f059637b74387f23511104bfda17d2560d9810c75debd06bb345a85b909805a718

Download Submit
C:\Windows\WinSxS\wow64_microsoft-windows-onedrive-setup_31bf3856ad364e35_10.0.19041.1_none_e585f901f9ce93e6\OneDrive.lnk

Filesize
1KB

MD5
c8e21e1d0d836f934d8bd40b2baf4d1e

SHA1
63b89a78f447bca546710dbf5a36b764253e32fe

SHA256
156ced071e3ef5117d7989b48940a14479e441c3ddd89c35d3ed8045327a4928

SHA512
f5cf4f4e2ebc1be209b4c0f1fe57dcce593c470a70ff9a577f4533a4a3e06bf4c08d1f921d218f8e039dcb472c8e2b449f70ecead78b272ff75319fba395eb09

Download Submit
memory/784-0-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download
memory/784-3947-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download
memory/784-4378-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download